Penetration Testing
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Oracle Application Express / Password hashes Feb 20 2013 12:58PM
Per Thorsheim (per thorsheim net)
Passwords are stored as salted MD5 values according to
programming4.us/database/8126.aspx

What you need after extracting the hash values is to use a password
cracker that handles Oracle specific salted MD5. Both John the Ripper &
Hashcat can do that:

www.hashcat.net
www.openwall.com/john/

Both...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus